semantica

mirror of https://github.com/semantica-agi/semantica.git synced 2026-09-02 04:00:40 +00:00

Files

T

Mohd Kaif 08c78bfb40 fix(security): resolve Scorecard vulnerability and token-permission alerts (#1280 )

- Bump explorer's brace-expansion (minimatch dep) 5.0.8 -> 5.0.9 and
  nanoid (postcss dep) 3.3.16 -> 3.3.18, fixing GHSA-rgw5-rvv9-x895 and
  GHSA-2v37-7h3g-55p8 (both DoS via unbounded input, both within the
  existing caret ranges declared by their parents).
- Move codeql.yml and defender-for-devops.yml's security-events: write
  (and codeql.yml's actions: read) from workflow-level down to their
  single job, matching Scorecard's Token-Permissions ideal of a
  read-only top-level default with sensitive scopes granted only where
  used.

2026-08-30 20:58:39 +05:30

actions/setup-semantica

ci: reusable install action, install-matrix, and release hardening (#1266 )

2026-08-30 17:30:21 +05:00

codeql

security: fix 12 vulnerabilities across CRITICAL→LOW severity

2026-04-12 13:41:31 +05:30

DISCUSSION_TEMPLATE

docs: add citation section and fix stale org references

2026-08-24 16:07:22 +05:30

ISSUE_TEMPLATE

docs: add citation section and fix stale org references